I Claim: 



I- 



1. ^apparatus for forwarding packets between ports, said ports associated with hosts 
having one or m^re of a layer 2 address, a.layer 3 address and a socket number, said apparatus 



comprising: 



comprising: 



20 



a flow table having a plurality of records; 

switch Xule coupled to said ports and said flow table, said switch module 

means forWarding a first packet between a first host and a second host 
in accordance with a&st record in said flow table and said layer 2 addresses of 
said first and second hoW and 

means for forwardiW second packet between a third host and a fourth 
host in accordance with a sec\d record in said flow table and said layer 3 
addresses of said third and fouruVhosts. 



2. An apparatus according to claim 1 , wherein said flow table comprises: 

an address resolution hash table comprising at least first and second hash entries, 
said first hash entry corresponding to said layer 2 address of one of said first and second hosts, said 
second hash entry corresponding to said layer 3 address of one of said third and fourth hosts; and 

an address resolution records table, said first and second records being stored in said 
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address —„ * - — . - - - — - ^ in said addre ; s 
resolutlon - — — — — - — said fot mi 

address of said on, of said third and fourth hosts, respectively. 

soeke, number of said one of said third and fourth hosts for retrieving said second record. 

4 An apparatus according to ciaim wherein s,d fir, packet is associated with a non- 
MP X protocol and said second packet is associated with an IP/IPX protocol 

5 An apparatus according to claim 1, further comprising: 

a CPU coupled to said flow tabie and communicating with said switch module, satd 

for alertine said CPU when a third packet between a fifth 
switch module further compns.ng means for alerting 

host and a sixth host ^es at one of s,d ports and a thud record contain.ng forwar mg 
information between satd fifth host and - stxth host does no, exist in - flow table, sard CP 

'A third record in said flow table, said switch module 
creating said third record and stonng said third record 

a- -d third packet between said fifth host and said sixth host in accordance 
thereafter forwarding said third pacKet oeiwc 
with said third record and said addresses of said fifth and sixth hosts. 
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Hin. to claim 5 wherein said switch module and said flow .able are 
6^ An apparatus according to claim :>, w.k 

together comprised of an ASIC. 

7 An apparatus according to claim 2, further comprising: 

a CPU coupled to said flow table and communicating win, said switch module, said 

switch module further comprising: . 

means for alerting said CPU when a third packet between a fifth host and a 
six ,h host arrives a, one of said ports and a third record containing forwarding 

table, said CPU creating said third record and storing said third record. ,„ said 
. ad dress resolution record table, said CPU further creating a hash entry ,n said 
address resolution hash table , ha, is linked to said third record and is associated with 
a portion of said address of one of said fifth and sixth hosts, 

rneans for hashing onto said address resolution record ,ab,e in —e 

with said portion of said address of said one of said fifth and six* hosts, 

■ means for retrieving said third record based on said hash, said switch 
module thereafter forwarding said third packet between said fifth host and said six* 
nos, in accordance with said third record and said addresses of said fifth and sixth 
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hosts. 
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8. An apparatus 
different networks. 



according to claim 1, wherein said first and second hosts belong to 



according to claim 1, wherein said third and fourth hosts belong to 



9. An apparatus according 
different networks. 

,0. An apparatus according toclaim 1, wherein said first, second, third and fourth hosts 
belong to the same network. 

„. An apparatus for Warding packets between ports, said ports inciuding a firs, port 
associated with a first hos, having a first layer 2 address and a firs, layer 3 address, and a second 
port associated with a second host having a second layer 2 address and a second iayer 3 address, a 
layer 2 flow of packets between said firs, and second hosts being based on said firs, and second 
layer 2 addresses, a layer 3 flow of packeu between said first and second hosts being based on said 
first and second layer 3 addresses, said apparatus comprising: 

a flow table comprising a plurality of address resolution records including: 

a first address resolution record that corresponds said first port with said firs, 

layer 2 address, ' ■ ' i 

a second address resolution record that corresponds said first port with said 

first layer 3 address, 
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third address resolution record that corresponds said second port with said 



second layer 2 address, and 

a fourth address resolution record that corresponds said second port with 

said second layer 3 address; and 

a switch module coupled to said ports and said flow table that detects said layer 2 
flow arriving at one of said firs, and second ports, and forwards packets belonging thereto to the 
other of said first and second ports based on said fir* and third address resolution records, said 
switch module also detects said layer 3 flow arriving a. one of said firs, and second ports, and 
forwards packets belonging thereto to the other of said firs, and second ports based on said second 
and fourth address resolution records. 

12. An apparatus as defined in claim 11, further comprising: 

a CPU coupled to said flow table and communicating with said switch module, said 
CPU creating said first, second, third and fourth address resolution records in said address 
resolution record table. 



^ , -j 13. An apparatus as defined in claim 12, wherein said.switch module includes: 
^ ^ a switch engine that determines whet/ said firs, and third address resolution 

records exist in said address resolution record tab/hen said firs, flow is detected, and whether 
said second and fourth address resolu.ion recor/exis, in said address reso.mion record table when 
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said second flow is detected; anc 

a CPU interfai that sends a first message to said CPU when said first flow is 
detected and said switch engZe determines that said first and third address resolution records do not 
exist in said address resolution record table, said CPU interface sends a second message to said 
CPU when said second/flow is detected and said switch engine determines that said second and 
fourth address resolu/on records do not exist in said address resolution record table, said CPU 
creating said first a/d third address resolution records in response to said first message, and said 
second and fourth/address resolution records in response to said second message. 



t\Q 14. An apparatus as 

one of IP and IPX protocols. 



defined in claim 11, wherein said layer 3 flow is in accordance with 



15. An apparatus as definedin^WI^^ 2 flow is in accordance with all 

protocols except IPand^PX. 



i!5 
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16. An apparatus as defined in claim 1 1 , wherein said flow table further includes an address 
resolution hash table comprising a plurality of address resolution hash records including: 

a first address resolution hash record that corresponds a portion of said first layer 2 
address with said first address resolution record; 

a second address resolution hash record that corresponds a portion of said first layer 
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3 address with said first address resolution record; 

a third address resolution hash record that corresponds a portion of said second layer 

2 address with said third address resolution record; and 

a fourth address resolution hash record that corresponds a portion of said second 
layer 3 address with said fourth address resolution record. 

! 7. An apparatus as defined in claim 13, wherein said flow table further includes an address 
resolution hash table comprising a plurality of address resolution hash records including: 

a first address resolution hash record that corresponds a portion of said first layer 2 
address with said first address resolution record; 

a second address resolution hash record that corresponds a.portion of said first layer 
3 address with said first address resolution record; 

a third address resolution hash record that corresponds a portion of said second layer 
2 address with said third address resolution record; and 

a fourth address resolution hash record that corresponds a portion of said second 
layer 3 address with said fourth address resolution record, 

said switch module accessing said first, second, third and fourth address resolution 
records in accordance wUh said corresponding portions of said addresses and said first, second, 
third and fourth address resolution record hash records, respectively, 
, said CPU linking said first and third address resolution hash records with said first 
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^ ^ address resolution records, respecfiveiy, in response ,0 said firs, message, and Unking said 
second and fourth address resoiution hash records with said second and four* address resoluhon 
records, respectively, in response to said second message. 

« An apparatus as defined in claim 1 1, wherein said firs, and second hosts have firs, and 
second sockets, respective,,, said layer 3 flow being further based on said first and second sockets, 
said second address resolution record further corresponding said first port with said firs, socket, 
said fourth address resolution record further corresponding said second port with said second 
socket. 

19. An apparatus as defined in claim 1 8, further comprising: 

a CPU coupled to said flow table and communicating with said switch module, said 
CPU creating said first, second, third and fourth address resolution records in said address 
resolution record table. 



W 5 



20. An apparatus as defined in claim 19, wherein said switch module includes: 
' a switch engine that determines whether said firs, and third address resolution 

records exis, in said address resolulion record table when said first flow is detected, and whether 
said second and fourth add re ss resolution records exis. in said address resolution record table when 
20 said second flow is detected; and 



SocTlndApparatus For Multiprotocol Switching And Routing; 



52 

Atty.Dkt. #10521/238256 



a CPU interface that sends a first message to said CPU when said first flow is 
detected and said switch engine determines that said first and third address resolution records do not 
exist in said address resolution record table, said CPU interface sends a second message to said 
CPU when said second flow is detected and said switch engine determines that said second and 
fourth address resolution records do not exist in said address resolution record table, said CPU 
creating said first and third address resolution records in response to said first message, and said 
second and fourth address resolution records in response to said second message. 

21 . An apparatus as defined in claim 20, wherein said flow table further includes an address 
resolution hash table comprising a plurality of address resolution hash records including: 

a first address resolution hash record that corresponds a portion of said first layer 2 
address with said first address resolution record; 

a second address resolution hash record that corresponds a portion of said first layer 
3 address with said first address resolution record; 

a third address resolution hash record that corresponds a portion of said second layer 
2 address with said third address resolution record; and 

a fourth address resolution hash record that corresponds a portion of said second 
layer 3 address with said fourth address resolution record, 

said switch module accessing said first, second, third and fourth address resolution 
records in accordance with said corresponding portions of said addresses and said first, second, 
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records, respectively, in response to said second message. 

said switch module is comprised of an 



22. An 

ASIC. 



apparatus as defined in claim 11, wherem 
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, f ed in claim 11 wherein said switch module and said flow table 
23. An apparatus as defined in claim ii, w 

are together comprised of an ASIC. 

AT ed in claim 11 wherein said first and second hosts belong to 
24. An apparatus as defined in claim ii, 

different networks. 

«f * switch said ports being associated 
(J0\ 25. Amethodofforwardingpacketsbetweenpor.sofaswitc^s 

!~,h hosts having addresses, said method comptW 

identifying a firs, address of a fir/one of said hosts; 
identifying a firs, port assoei/d «i* said first host; 
cre,ingarecord*a,eX„dssaidfirs,address W i*saidfirst P ort; 
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storing said record in a taple; 
linking said record t0 a hash; 

associating said Wash with a portion of said first address; 
receiving a data packet at a second port; 
extracting skid first address from said data packet; 

retrievin/said record by hashing onto said table using said portion of said first 

address; and 

forwLing said data packet to said first port in accordance with said record. 

0 26. A method as defined in claim 25, further comprising: 

corresponding a swap address with said record; 
receiving a second data packet at a third port; 

routing said second data packet by forwarding said second data packet to said third 
port in accordance with said record and swapping an address within said second data packet with 
15 said swap address in accordance with said record. 

. JD \,27. A method as defined in claim 25, further>mprising: ' 

identifying a second address of ^second one of said hosts; 
identifying a second port associated with said second host; 
20 creating a second recordZt corresponds said second address with said second port; 
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addresses; 



storing said second record in said tab) 
linking said record to said hash; 

said hash with a portion of said second address; 



associating : 



sorting said first and seco/d 



records in said table based on said first and second 



receiving a second data packet at a second port; 
extracting s^ra second address from said second data packet; 

retrievi/g said second record by hashing onto said table using said portion of said 

and second records based on said second address; 



second address and searching among said first 

IS 

>r 10 and 

forwarding said data packet to 



said second port in accordance with said second 



!| 
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2i : A method as defined in Cain, 25, wherein said second port is associated with a second 
one of said hosts, said firs, and second hosts belonging to different networks. 

^ SL h^ one or m ore of an Ethernet address^— ' «— *^ 
number, said method comprising: 

preparing a flow table comprising a plurality of records; 
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receiving a first packet at a first port; 
.extracting a protocol identifier frorn said first packet; 

if said protocol identifier is IP of IPX: 

determining wt/ether said first packet needs to be switched within the 
same network or routid between different networks; 

if said first jacket needs to be switched, switching said first packet 
between said first Lt and a second port based on a first record from said 
flow table and ori of said IP or IPX address of said first packet; and 

if said first packet needs to be routed, routing said first packet 
between said f/rst port and a third port based on a second record from said 
flow table and one of said IP or IPX address of said first packet; and 

if said protocol identifier is not IP or IPX: 
1 ' ... switching said first packet between said first port and a third port 

I based on I third record from said flow table and said Ethernet address of 

j 15 said first/packet. 



pio 



30. A 
comprise: 



method as defined in claim 29, wherein said switching and routing steps each 



. determining whether a record associated with an address of said first packet exists in 
20 said flow table; 
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if said record does not exist, alerting a CPU to create said record in said flow table; 
forwarding said first packet to a port designated in said record. 

3 L A method as defined in claim 29, wherein if said protocol identifier is IP or IPX and 
said packet needs to be switched, said step of switching said first packet between said first port and 
said second port is further based on said socket number of said first packet. 

32. A method of forwarding packets between ports of a switch, said ports including a first 
port associated with a first host having a first layer 2 address and a first layer 3 address, and a 
second port associated with a second host having a second layer 2 address and a second layer 3 
address, a layer 2 flow of packets between said first and second hosts being based on said first and 
second layer 2 addresses, a layer 3 flow of packets between said first and second hosts being based 
on said first and second layer 3 addresses, said method comprising: 

preparing a first address resolution record in a flow table that corresponds said first 

port with said first layer 2 address;' 

preparing a second address resolution record in said flow table that corresponds said 

\ • - 

i 

first port with said first layer 3 address; \ 

preparing a third address resolution record in said flow table that corresponds said 

second port with said second layer 2 address ; 

preparing a fourth address resolution record in said flow table that corresponds said 
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second port with said second layer 3 address; 

detecting said layer 2 flow arriving a. one of said first and second ports and 
forwarding packets belonging thereto to the other of said first and second ports based on said first 

and third address resolution records; and 

detecting said layer 3 flow arriving at one of said first and second ports, and 
forwarding packets belonging thereto to the other of said first and second ports based on said 
second and fourth address resolution records. 

33. A method as defined in claim 32, further comprising: 
|0 . determining whether said first and third address resolution records exist in said.flow 

table when said first flow is detected; 

determining whether said second and fourth address resolution records exist in said 

flow table when said second flow is detected; 

creating said first and third address resolution records when said first flow is 
detected and when it is determined that said first and third address resolution records do not exist in 
said flow table; and 

creating said second and fourth address resolution records when said second flow is 
detected and when it is determined that said second and fourth address resolution records do not 
exist in said flow table. 

20 
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34. A method as defined in claim 32, wherein said layer 3 flow is in accordance with one of 
IP and IPX protocols. 



35. A method as definedjniOai*^^ layer 2 flow is in accordance with all 

^ Gk ' 

5 protocols excjplJP'and IPX.. 



36. A method as defined in claim 32, further comprising: 

preparing a first address resolution hash record in said flow table that corresponds a 
portion of said first layer 2 address with said first address resolution record; 

preparing a second address resolution hash record in said flow table that 
corresponds a portion of said first layer 3 address with said first address resolution record; 

preparing a third address resolution hash record in said flow table that corresponds a 
portion of said second layer 2 address with said third address resolution record; and 

preparing a fourth address resolution hash record in said flow table that corresponds 
|l5 a portion of said second layer 3 address with said fourth address resolution record. 



12 



if 
.... 
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37. A method as defined in claim 33, further comprising: 

preparing a first address resolution hash record in said flow table that corresponds a 
portion of said first layer 2 address with said first address resolution record; 

preparing a second address resolution hash record in said flow table that 
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corresponds a portion of said first layer 3 address with said first address resolution record; 

preparing a third address resolution hash record in said flow table that corresponds a 
portion of said second layer 2 address with said third address resolution record; 

preparing a fourth address resolution hash record in said flow table that corresponds 
5 a portion of said second layer 3 address with said fourth address resolution record; 

hnking said first and third address resolution hash records with said first and third 
address resolution records, respectively, when said first flow is detected and when it is determined 
that said first and third address resolution records do not exist in said flow table in response to said 

first message; and , 
0 linking said second and fourth address resolution hash records with said second and 

fourth address resolution records, respectively, when said second flow is detected and when it is 

determined that said second and fourth address resolution records do not exist in said flow table. 

38. A method as defined in claim 37, wherein said step of forwarding said packets 
15 belonging to said first flow includes accessing said first and third address resolution records in 
. accordance with said corresponding portions of said addresses and said first and third address 
resolution record hash records, respectively, and 

wherein said step of forwarding said packets belonging to said second flow includes 
accessing said second and fourth address resolution records in accordance with said corresponding 
20 portions of said addresses and said second and fourth address resolution record hash records, 
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respectively. 



39. A method as defined in claim 32, wherein said first and second hosts have first and 
second sockets, respectively, said layer 3 flow being further based on said first and second sockets, 
said second address resolution record further corresponding said first port with said first socket, 
said fourth address resolution record further corresponding said , second port with said second 
socket. 

40. A method as defined in claim 39, further comprising: 

determining whether said first and third address resolution records exist in said flow 

table when said first flow is detected; 

determining whether said second and fourth address resolution records exist in said 

flow table when said second flow is detected; 

creating said first and third address resolution records when said first flow is 
detected and when it is determined that said first and third address resolution records do not exist in 
said flow table; and 

creating said second and fourth address resolution records when said second flow is 
detected and when it is determined that said second and fourth address resolution records do not 
exist in said flow table. 
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41 . A method as defined in claim 40, further comprising: 

preparing a firs, address resolution hash record in said flow table tha, corresponds a 
portion of said first layer 2 address with said first address resolution record; 

preparing a second address resolution hash record in said flow table tha. 
corresponds a portion of said firs, layer 3 address with said firs, address resolution record; 

preparing a ted address resolution hash record in said flow table that corresponds a 
portion of said second layer 2 address with said third address resolution record; 

preparing a fourth address resolution hash record in said flow table tha, corresponds 
a portion of said second layer 3 address with said fourth address resolution record; 

Uridng said first and third address resolution hash records with said firs, and.third 
address resolution records, respectively, wh*n said first flow is detected and when it is determined 
ma , said fits, and third address reso,u,ion records do not exist in said flow table in response to said 
first message; and 

linki „g said second and fourth address resolution hash records with said second and 
fourth address resolution records, respective*, when said second flow is detected and when it is 
determined that said second and fourth address resolution records do no. exist in said flow table. 

42. A method as defined in claim 41, wherein said step of forwarding said'packets 
belonging to said first flow includes accessing said firs, and third address resoiution records in 
accordance with said corresponding porhons of said addresses and said firs, and third address 

63 

CooalHeede . Atty. Dkt. #10521/238256 

Method And Apparatus For Multiprotocol Switching And Rout.ng 




resolution record hash records, respectively, and 

wherein said step of forwarding said packets belonging to said second flow includes 
accessing said second and fourth address resolution records in accordance with said corresponding 
portions of said addresses and said second and fourth address resolution record hash records, 
5 respectively. 

43. A method as defined in claim 32, wherein said first and second hosts belong to different 
networks. 
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